2 matches found
Remote code execution in verot/class.upload.php
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...
9.8CVSS2.9AI score0.26184EPSS
SaveExploits7References13Affected Software1
GHSA-R5GM-4P5W-PQ2P Remote code execution in verot/class.upload.php
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...
9.8CVSS9.4AI score0.26184EPSS
SaveExploits7References12
20